Salesforce authenticator

Salesforce Authenticator adds an extra layer of security for your online accounts with multi-factor authentication (also known as two-factor authentication). With Salesforce Authenticator, you use your mobile device to verify your identity when logging in to your account or performing critical actions. The app sends you a push notification, and you approve or deny the activity with just a tap. For even more convenience, Salesforce Authenticator can use your mobile device’s location services to automatically approve account activity that you trust. The app also provides one-time verification codes for use while you’re offline or have low connectivity. Use Salesforce Authenticator to secure all your online accounts that support time-based one-time passwords (TOTP). Any service that allows multi-factor authentication using an “Authenticator app” is compatible with Salesforce Authenticator.Location Data & PrivacyIf you enable location-based automation in Salesforce Authenticator, location data is stored securely on your mobile device and not in the cloud. You can delete all location data from your device or turn off location services at any time. Learn more about how the app uses location data in Salesforce Help.Battery UsageRather than getting precise location updates, Salesforce Authenticator only receives updates when you enter or leave the approximate area, or “geofence,” of a location that you trust. By minimizing the frequency of location updates, Salesforce Authenticator conserves your mobile device’s battery life. To reduce battery usage even more, you can turn off location services and stop automating your activity.

Salesforce Authenticator agrega una capa adicional de seguridad para sus cuentas en línea con autenticación multifactor (también conocida como autenticación de dos factores). Con Salesforce Authenticator, utiliza su dispositivo móvil para verificar su identidad cuando inicia sesión en su cuenta o realiza acciones críticas. La aplicación te envía una notificación automática y tú apruebas o rechazas la actividad con solo un toque. Para mayor comodidad, Salesforce Authenticator puede utilizar los servicios de ubicación de su dispositivo móvil para aprobar automáticamente la actividad de la cuenta en la que confía. La aplicación también proporciona códigos de verificación únicos para usar mientras no estás conectado o tienes poca conectividad.Utilice Salesforce Authenticator para proteger todas sus cuentas en línea que admitan contraseñas de un solo uso basadas en el tiempo (TOTP). Cualquier servicio que permita la autenticación multifactor mediante una "aplicación de autenticación" es compatible con Salesforce Authenticator.Datos de ubicación y privacidadSi habilita la automatización basada en la ubicación en Salesforce Authenticator, los datos de ubicación se almacenan de forma segura en su dispositivo móvil y no en la nube. Puede eliminar todos los datos de ubicación de su dispositivo o desactivar los servicios de ubicación en cualquier momento. Obtenga más información sobre cómo la aplicación utiliza los datos de ubicación en la Ayuda de Salesforce.Uso de la bateríaEn lugar de obtener actualizaciones de ubicación precisas, Salesforce Authenticator solo recibe actualizaciones cuando ingresa o sale del área aproximada, o "geocerca", de una ubicación en la que confía. Al minimizar la frecuencia de las actualizaciones de ubicación, Salesforce Authenticator conserva la duración de la batería de su dispositivo móvil. Para reducir aún más el uso de la batería, puedes desactivar los servicios de ubicación y dejar de automatizar tu actividad.

Trust | SecurityTrust | SecurityAs cyberattacks grow more common, passwords no longer provide sufficient safeguards against unauthorized account access. Multi-factor authentication (or MFA) adds an extra layer of protection against threats like phishing attacks, increasing security for your business and your customers. That’s why Salesforce requires MFA when accessing Salesforce products. To help your users satisfy this requirement, MFA is automatically enabled for direct logins to your products.How MFA WorksMFA requires a user to validate their identity with two or more forms of evidence — or factors — when they log in. One factor is something the user knows, such as their username and password combination. Other factors are verification methods that the user has in their possession. While there’s a risk that a password may be compromised, it’s highly unlikely that a bad actor can also gain access to a strong verification method like a security key or authentication app. Watch Video >Salesforce MFA for Direct LoginsSalesforce offers simple, innovative MFA solutions that provide a balance between strong security and user convenience. Salesforce products support several types of strong verification methods to satisfy your business and user requirements.Salesforce Authenticator Mobile App: A fast, frictionless solution that makes MFA verification easy via simple push notifications that integrate into your Salesforce login process. Use this app to increase security while driving a better user experience.Third-Party Authenticator Apps: Mobile, desktop, and browser extension apps that generate time-based one-time password (TOTP) codes for MFA verification. There are many apps available, including Google AuthenticatorTM, Microsoft AuthenticatorTM, and AuthyTM.Security Keys: Small physical devices that are easy to use because there’s nothing to install and no codes to enter. Security keys are a great solution if mobile devices aren’t an option for your users. Salesforce supports USB, Lightning, and NFC keys that support the WebAuthn or

U2F standards, including Yubico’s YubiKeyTM and Google’s TitanTM Security Key.Built-In Authenticators: An authenticator service that's built into a computer or mobile device, such as Windows HelloTM, Touch ID(R), or Face ID(R). These services simplify MFA verification by eliminating the need for a separate authentication device or app.Learn More >MFA for Single Sign-On (SSO)Do your users regularly access multiple apps during the course of their day? Your best option is to combine MFA and SSO, so you can deliver enhanced security along with a convenient, simplified login experience. If you've already integrated your Salesforce products with an SSO solution, ensure that MFA is enabled for all your Salesforce users. You can use your SSO provider’s MFA service. Or, for products that are built on the Salesforce Platform, you can use the free MFA functionality provided in Salesforce instead of enabling MFA at the SSO level. Learn More in the MFA FAQ's SSO Section >Customer StoryShiseido Secures Customer Data with Multi-Factor AuthenticationSee how Shiseido, an innovative, global beauty brand, implemented MFA for Salesforce to help protect their critical systems and customer data. You'll learn about the importance and benefits of MFA and understand how Salesforce partners with our customers to make it easy to implement MFA.Learn More About MFAMFA Rollout PackPrepare Your Users for MFAMFA affects the login experience so make sure your users are aware and prepared! To ensure a smooth transition, take advantage of the MFA Rollout Pack. It's loaded with customizable templates and guidance for user training and onboarding.MFA Guidance for Salesforce PartnersLooking for guidance on how you and your customers can satisfy the MFA requirement? Check out the MFA Requirement page in the Partner Community, your central place for partner-related MFA resources. A partner community login is required.Go to the MFA Partner Community Page >

To click "Recover...", and it will send you an email with the secret key included. Retrospect's multi-factor authentication is compatible with the leading MFA apps in the App Store, including Duo, Salesforce Authenticator, Google Authenticator, Authy, and Microsoft Authenticator. NOTE:: Email notifications are required for MFA recovery. If you do not have email set up and you lose the ability to generate the one-time codes, you will lose access to Retrospect. For security, if you are importing a configuration file that had a password and MFA set up, you will need to use the password and one-time code to import it. Retrospect Backup 19: Support for Microsoft Azure for Government Retrospect supports blob storage on Microsoft Azure for Government to enhance support for state and local agencies looking for data protection in a US-based high-security data center. On Windows and Mac, "Microsoft Azure US Gov Blob Storage" is now available in the cloud dropdown menu. Retrospect Backup 19: Flexible Immutable Retention Periods Retrospect's ransomware protection allowed customers to completely protect themselves from ransomware using immutable backups stored in their cloud. Retrospect provided an industry-leading workflow with a sliding window of immutable protection. Data in backups that were expiring from the window were again included in the next protected backup, ensuring customers always had a full synthetic backup of every point-in-time backup within that locked window. However, this workflow does not work for everyone. Other businesses have data that needs to be protected in an immutable backup, but the data does not change often. In the previous workflow, that data was re-backed up whenever it was exiting the sliding window. Retrospect Backup 19 supports an additional type of retention where Retrospect extends the period on past backups instead of including that data in new backups: "Update retention period for past backups". The archival window option can be applied to a new set or added to an existing set. Retrospect Management Console: Redesigned Dashboard Retrospect Management Console aggregates your entire infrastructure in a single pane of glass. The most common feedback we received though was that the original dashboard provided too much data. It was so much data that customers found it overwhelming. The redesigned dashboard improves this aggregation to a simple set of graphs to quickly summarize the state of your environment without adding too much detail. We plan to roll out Redesigned Dashboard for Retrospect Management Console before the official release of Retrospect Backup 19. Retrospect Management Console: OS Compliance The most common vector for ransomware is infecting unpatched systems. Keeping systems up to date with the latest OS versions is critical to protecting your infrastructure against ransomware attacks, and now Retrospect makes it easy with OS Compliance. Retrospect Management